Month: March 2017
Inventory of systems that are using Offline Files
If you need a mechanism by which to identity or inventory systems that have cached files using Offline Files, you can retrieve details through WMI in Win32_OfflineFilesItem. ConfigMgr inventory can be easily expanded to collect this data for reporting. Below is an example screen shot from my lab on a Win7 system that has a cached offline file. Be aware, and keep in mind that you may risk exposing confidential information based upon the server or file name.
p.s. happy Pi day
Windows 10 News You Can Use – March 2017
This March 2017 edition of “news you can use” for Windows 10 is chalked full of many resources as it was an active month in February! To help break apart such a large list, I have split it into three sections – Win10 news and resources, combating new security threats with Win10, and training / how-to guides.
Windows 10 News & Resources
- Signup for the new Win10 IT Professional insider newsletter! Get the latest news, resources, tools, and guidance to help you explore and deploy Windows 10; migrate from Windows 8.1 or Windows 7; and manage your existing Windows client infrastructures successfully—and with less effort.
https://technet.microsoft.com/en-us/windows/ee837411 - Windows 10 security experts share how to stay ahead of the catalysts shaping the cyber landscape
http://blogs.windows.com/business/2017/02/13/security-trends-windows-10 - FastTrack for Windows 10 announced
https://blogs.windows.com/business/2017/01/23/get-fasttrack-deploy-windows-10 - The whitepaper on the “total economic impact” of Windows 10 was updated and refreshed in December 2016. This Microsoft-commissioned report by Forrester demonstrates how deploying Windows 10 can help reduce costs and provide significant benefits to your organization. The report found an ROI of 233% with a payback period of only 14 months. Download now to read more!
http://wincom.blob.core.windows.net/documents/Windows%2010%20TEI%20Study.pdf - Infographic: Simplify Windows 10 management and lower TCO
https://gallery.technet.microsoft.com/Infographic-Simplify-37e77674 - For those using and creating Provisioning Packages, the Windows Image Configuration Designer is now available as a universal application. So it’s not necessary to download and install from the Windows ADK!
https://www.microsoft.com/store/apps/9nblggh4tx22
Windows 10 and Surface stomp on security threats with new enterprise innovations
These are key announcements from blog post: https://blogs.windows.com/business/2017/02/10/windows-10-surface-stomp-security-threats-new-enterprise-innovations
- NSA adds Windows 10 and Surface to list for classified use – Surface Pro 3, Surface Pro 4 and Surface Book have been added to the NSA’s Commercial Solutions for Classified Programs (CSfC) list. Additional information on the NSA site: https://www.nsa.gov/resources/everyone/csfc/components-list
- Enhanced security capabilities with Surface Enterprise Management Mode (SEMM). SEMM will protect PCs at the UEFI level – “so a lot of the attacks you would expect attackers to use in order to just re-enable the camera without the user knowing, won’t even work, because the device is disabled at a fundamental, hardware level”.
- Extending device management in Windows 10 using MDM software, administrators will be able to apply settings and configurations from the Security Baseline Policies list. Previously, those settings were only available through Group Policy.
- New MDM Migration Analytics Tool designed to help customers figure out migrating from Group Policy to MDM. It scans a system for all of the policies applied to it, tries to map those policies to their MDM equivalents, and spits out a report of the results.
- The quest for No More Passwords with Windows Hello – Now available with on-premises Active Directory not just Azure AD.
- Additionally, the Dynamic Lock feature in Windows Hello connects a user’s smartphone to their Windows 10 device, and automatically locks the device when the phone’s Bluetooth signal drifts far away.
- The Upgrade Analytics “tool” is being rolled into a suite of tools called Windows Analytics. Upgrade Analytics itself is being rebranded as Upgrade Readiness.
- Windows Analytics will now include Update Compliance – free insights that provide a holistic view of Windows 10 update compliance for both monthly quality updates and new feature updates. This free resource will help organizations monitor deployment progress, identify issues and provide insights about their fully-patched, secure Windows 10 device environment.
Windows 10 Training and Guides
- New how-to articles and guides available from Microsoft!
- Step by step guide: Configure a test lab to deploy Windows 10
- Deploy Windows 10 in a test lab using Microsoft Deployment Toolkit
- Deploy Windows 10 in a test lab using System Center Configuration Manager
- Determine the Enterprise Context of an app running in Windows Information Protection (WIP)
- Recommended Enterprise Cloud Resources and Neutral Resources network settings with Windows Information Protection (WIP)
- Using Outlook Web Access with Windows Information Protection (WIP)
- Cortana integration in your business or enterprise
- Quick guide to Windows as a service
- Wake On LAN for Surface devices
- Stop malware with Windows 10 Device Guard
https://mva.microsoft.com/en-US/training-courses/dropping-the-hammer-on-malware-with-windows-10-device-guard-16926 - Microsoft Mechanics video: A look at Advanced Threat Analytics in the datacenter
https://youtu.be/RAS-TI6PUrg